#include <decode.h>

Data Fields
uint64_t	ptime
	Packet timestamp in epoch milliseconds.

yfFlowKey_t	key
	Flow key containing decoded IP and transport headers. More...

size_t	allHeaderLen
	Length of all headers, L2, L3, L4.

struct pcap_pkthdr	pcap_hdr
	pcap header

pcap_t *	pcapt
	pcap struct

uint64_t	pcap_offset
	offset into pcap

uint16_t	pcap_caplist
	caplist

uint16_t	iplen
	Packet IP length. More...

uint16_t	ifnum
	Interface number packet was decoded from. More...

yfTCPInfo_t	tcpinfo
	TCP information structure. More...

yfL2Info_t	l2info
	Decoded layer 2 information. More...

size_t	paylen
	Length of payload available in captured payload buffer. More...

uint8_t	payload [1]
	Captured payload buffer. More...

Detailed Description

Full packet information structure.

Used in the packet ring buffer.

Field Documentation

uint16_t yfPBuf_st::ifnum

Interface number packet was decoded from.

Currently unused.

uint16_t yfPBuf_st::iplen

Packet IP length.

yfFlowKey_t yfPBuf_st::key

Flow key containing decoded IP and transport headers.

yfL2Info_t yfPBuf_st::l2info

Decoded layer 2 information.

size_t yfPBuf_st::paylen

Length of payload available in captured payload buffer.

uint8_t yfPBuf_st::payload[1]

Captured payload buffer.

Note that this in a convenience field; the actual field is larger than one byte.

yfTCPInfo_t yfPBuf_st::tcpinfo

TCP information structure.

The documentation for this struct was generated from the following file: